lister lynch wrote:
>Our ISP, Covad, is periodically claiming that we have excessive DNS
>requests and is threatening to turn off our service. It's primarily due
>to SA, I think. Looked around for answers, and already set a bunch of
>the BL checks to 0.0 to turn off the rules. Any idea how to further
>prevent the excessive DNS requests?
>
>Setup:
>SA running on FC1 as firewall, passing mail thru to an Exchange server
>on the inside.
>
>Thanks a bunch for any insight,
>Mike
>
>
>
Don't bother setting them all to 0. That works, but there's a much
easier way to turn off all the RBL tests in one shot:
in /etc/mail/spamassassin/local.cf add:
skip_rbl_checks 1
Another option is to just force ALL network tests to be off. Add the -L
flag to spamd or spamassassin (depending on which one you use).
Of course, my question is if you are a network of any reasonable size,
why are you using your ISP's DNS servers for resolution and not your own
local DNS resolver? (And even if you are a "small fry" you might
consider having a caching-only local nameserver)
